The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer than the requested number of bytes, which allows local users to obtain sensitive information from kernel memory, cause a denial of service (memory corruption and system crash), or possibly gain privileges via a writev system call with a crafted pointer.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-firmwareUpgrade kernel-docUpgrade perfUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-abi-whitelistsUpgrade python-perfUpgrade kernel-develUpgrade kernel | Dec 1, 2016 | Feb 28, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 28, 2014 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Feb 28, 2014 |
| Suse | — | Upgrade kernel-default | Dec 18, 2015 | Feb 28, 2014 |
| Ubuntu | — | Upgrade linux-image-3.5.0-49-omapUpgrade linux-image-3.5.0-49-genericUpgrade linux-image-3.2.0-63-virtualUpgrade linux-image-3.5.0-49-powerpc64-smpUpgrade linux-image-3.5.0-49-highbankUpgrade linux-image-3.8.0-39-genericUpgrade linux-image-3.11.0-20-genericUpgrade linux-image-3.11.0-20-generic-lpaeUpgrade linux-image-3.2.0-63-powerpc-smpUpgrade linux-image-3.2.0-63-genericUpgrade linux-image-3.2.0-63-highbankUpgrade linux-image-3.5.0-49-powerpc-smpUpgrade linux-image-3.2.0-63-powerpc64-smpUpgrade linux-image-3.2.0-1446-omap4Upgrade linux-image-3.2.0-63-generic-paeUpgrade linux-image-3.5.0-241-omap4Upgrade linux-image-3.2.0-63-omap | Nov 8, 2024 | Feb 28, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub